CVE-2011-3295

The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service (CPU consumption) via crafted network traffic, aka Bug ID CSCti59888.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://www-europe.cisco.com/cisco/software/release.html?mdfid=279879106&reltype=all&relind=AVAILABLE&release=3.9.2&softwareid=280867577&sortparam=7
http://www.securitytracker.com/id?1027005
http://www.securitytracker.com/id?1027006

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:cisco:ios_xr:3.8.0:::::::*
	cpe:2.3:o:cisco:ios_xr:3.8.1:::::::*
	cpe:2.3:o:cisco:ios_xr:3.8.2:::::::*
	cpe:2.3:o:cisco:ios_xr:3.8.3:::::::*
	cpe:2.3:o:cisco:ios_xr:3.8.4:::::::*
	cpe:2.3:o:cisco:ios_xr:3.9.0:::::::*
	cpe:2.3:o:cisco:ios_xr:3.9.1:::::::*
	cpe:2.3:o:cisco:ios_xr:3.9.2:::::::*
	cpe:2.3:o:cisco:ios_xr:4.0.0:::::::*
	cpe:2.3:o:cisco:ios_xr:4.0.1:::::::*
	cpe:2.3:o:cisco:ios_xr:4.0.2:::::::*
	cpe:2.3:o:cisco:ios_xr:4.0.3:::::::*
	cpe:2.3:o:cisco:ios_xr:4.0.4:::::::*
	cpe:2.3:o:cisco:ios_xr:4.1:::::::*

History

No history.

Information

Published : 2012-05-02 10:09

Updated : 2024-02-04 18:16

NVD link : CVE-2011-3295

Mitre link : CVE-2011-3295

CVE.ORG link : CVE-2011-3295

JSON object : View

Products Affected

cisco

ios_xr

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2011-3295", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-05-02T10:09:21.473", "references": [{"url": "http://www-europe.cisco.com/cisco/software/release.html?mdfid=279879106&reltype=all&relind=AVAILABLE&release=3.9.2&softwareid=280867577&sortparam=7", "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id?1027005", "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id?1027006", "source": "ykramarz@cisco.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service (CPU consumption) via crafted network traffic, aka Bug ID CSCti59888."}, {"lang": "es", "value": "Los procesos NETIO y IPV4_IO en Cisco IOS XR v3.8 hasta v4.1, como los utilizados en el sistema Cisco Carrier Routing System y otros productos, permite a atacantes remotos causar una denegaci\u00f3n de servicio (consumo de CPU) a trav\u00e9s de tr\u00e1fico de la red manipulado, tambi\u00e9n conocido como Bug ID CSCti59888."}], "lastModified": "2012-10-30T03:55:59.597", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96F48419-AF66-4B50-ACBF-9E38287A64FA"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBB71A24-AA6C-4BAD-BD37-5C191751C9DF"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A20B6A9-27B7-4F42-B88D-F4AACC9BC24D"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79164FAE-AE31-4DA2-B4C2-7879268BA29E"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B9A223A-7A0A-4E31-B8A1-C809373A799D"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1ECAB9C3-9248-4663-ABAE-31FFC969EF3A"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "10596213-9D2B-48A3-A733-744D41E90419"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A07DCCD1-85D5-4ED2-B845-8C6EAC7E9D9B"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F57421B-F54C-4C50-8B25-AF787E541C5A"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A865225-6AEA-430D-8DB6-E70F7ED5E547"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5DA73AC0-1CD2-4B6B-940A-DBB0C97E2C09"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39F8B336-0DFA-41CE-9EFF-89A09BBDC6D6"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A1D1B60-C94F-44BF-8194-7758394E31C3"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06E63681-C89F-4569-A52C-B870D48E436C"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}